Cisco AIR-AP521G-A-K9 Configuration Guide - Page 102

Broadcast in Beacon, Add VLAN, Web Authentication, No Security, WPA-PSK,

Page 102 highlights

Creating a New WLAN SSID for the Employee VLAN Figure 8-8 Create WLAN Window Chapter 8 Adding Employee Access with Web Authentication Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Use the window to create a new WLAN SSID and to specify the security settings. Accept the default SSID or enter a new SSID value in the SSID field. The SSID can be up to 32 alphanumeric characters. Check Broadcast in Beacon if you want to broadcast the SSID so that the devices that do not specify an SSID can associate (establish a wireless connection) with the access point. Only one SSID can be included in the beacon (the employee access WLAN SSID). From the VLAN list, select the data VLAN ID that you want to associate with the SSID. If you click Add VLAN, the Add VLAN window appears that enables you to add a new VLAN. To do this, see "Adding an Employee Access VLAN" section on page 8-1. Check Web Authentication. Click the Security Type drop-down arrow and choose one of these security options: • No Security-This is the least secure option. Select it only for an SSID that is used in a public place (guest SSID), and associate it with a VLAN that restricts access to your network. There is no encryption, and the authentication type is open authentication. • WEP-This security setting requires that the access point and the client device (a device that connects to the wireless device such as a laptop or a PC) share the same WEP key to keep the communication private. • EAP-This security setting enables IEEE 802.1X authentication and requires you to select the IP address of a RADIUS server. The encryption type is WEP, and the authentication type is IEEE 802.1x. • WPA-This security setting is more secure than the EAP setting. It enables WPA authentication and requires you to select the IP address of a RADIUS server. Client devices that associate with the access point by using this SSID must be WPA-capable. • WPA-PSK-Select this security setting when you want to use the WPA encryption and you do not have access to a RADIUS server. It requires that the access point and the client device share the same WPA-PSK. The key can be from 8 to 63 characters long. Cisco 500 Series Wireless Express Mobility Controller Configuration Guide 8-6 OL-15283-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144

8-6
Cisco 500 Series Wireless Express Mobility Controller Configuration Guide
OL-15283-01
Chapter 8
Adding Employee Access with Web Authentication
Creating a New WLAN SSID for the Employee VLAN
Figure 8-8
Create WLAN Window
Use the window to create a new WLAN SSID and to specify the security settings.
Step 3
Accept the default SSID or enter a new SSID value in the SSID field. The SSID can be up to 32
alphanumeric characters.
Step 4
Check
Broadcast in Beacon
if you want to broadcast the SSID so that the devices that do not specify an
SSID can associate (establish a wireless connection) with the access point. Only one SSID can be
included in the beacon (the employee access WLAN SSID).
Step 5
From the VLAN list, select the data VLAN ID that you want to associate with the SSID.
Step 6
If you click
Add VLAN
, the Add VLAN window appears that enables you to add a new VLAN. To do
this, see
“Adding an Employee Access VLAN” section on page 8-1
.
Step 7
Check
Web Authentication
.
Step 8
Click the Security Type drop-down arrow and choose one of these security options:
No Security
—This is the least secure option. Select it only for an SSID that is used in a public place
(guest SSID), and associate it with a VLAN that restricts access to your network. There is no
encryption, and the authentication type is open authentication.
WEP
—This security setting requires that the access point and the client device (a device that
connects to the wireless device such as a laptop or a PC) share the same WEP key to keep the
communication private.
EAP
—This security setting enables IEEE 802.1X authentication and requires you to select the IP
address of a RADIUS server. The encryption type is WEP, and the authentication type is IEEE
802.1x.
WPA
—This security setting is more secure than the EAP setting. It enables WPA authentication and
requires you to select the IP address of a RADIUS server. Client devices that associate with the
access point by using this SSID must be WPA-capable.
WPA-PSK
—Select this security setting when you want to use the WPA encryption and you do not
have access to a RADIUS server. It requires that the access point and the client device share the same
WPA-PSK. The key can be from 8 to 63 characters long.